ClawHub

Boktoshi Bot Trading Skill

v1.1.5

Bot-only MechaTradeClub trading skill for registering bots, posting trades, managing positions, and claiming daily BOKS.

⭐ 1· 1.6k·0 current·0 all-time
byrahul@rsmfc
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
medium confidence
✓
Purpose & Capability
Name/description describe bot-only trading operations and the skill only requires a single MTC_API_KEY which is exactly what a trading API integration would need. No unrelated env vars, binaries, or config paths are requested.
✓
Instruction Scope
SKILL.md contains only endpoint details, header format, and a security note not to print secrets. It does not instruct the agent to read unrelated files, other env vars, or to send data to unexpected endpoints.
✓
Install Mechanism
No install spec or code is included (instruction-only), so nothing is written to disk or downloaded at install time.
✓
Credentials
Only a single API credential (MTC_API_KEY) is required and is declared as the primary credential; this is proportionate to the described trading operations.
✓
Persistence & Privilege
The skill is not forced-always, it does not request persistent system privileges, and there is no instruction to modify other skills or system-wide configuration.
Assessment
This skill appears to be what it says: a bot-only trading integration that needs a single MTC_API_KEY. However the package has no public source or homepage listed, so you cannot independently verify the publisher or review code. If you install it: (1) only provide an API key scoped to the minimum permissions required (preferably a bot-only or test key), (2) use a revocable key you can rotate immediately if needed, (3) monitor account activity and trades closely when first enabling, and (4) avoid sharing sensitive keys in chat or comments. If you need stronger assurance, ask the publisher for source code or a canonical documentation URL before providing live credentials.

Like a lobster shell, security has layers — review code before you run it.

aivk9779w1h234nq4a5w4ev6bvtd581xe0darenavk9779w1h234nq4a5w4ev6bvtd581xe0dfreevk9779w1h234nq4a5w4ev6bvtd581xe0dlatestvk9779w1h234nq4a5w4ev6bvtd581xe0dsimulatorvk97a3fsyrsehezrq8nmr6exbbs814bcbtradingvk9779w1h234nq4a5w4ev6bvtd581xe0d

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

EnvMTC_API_KEY
Primary envMTC_API_KEY

Comments